Privacy Policy

1. Who we are

Konzept is a digital agency based in Sarajevo, Bosnia and Herzegovina. This policy explains how we collect, use, and protect your personal data when you visit our website, contact us, or work with us.

‍

2. What information we collect

We only collect the information we need to do our job:

• Information you share with us
  • Name, email, company details, job title (via contact forms, newsletter signups, or direct communication).
  • Project information, brand assets, or files you send us during a collaboration.
  • Business information needed for contracts, billing, and payments.
• Information we collect automatically
  • Technical details like IP address, browser type, and device (via analytics tools).
  • Cookies to understand how people use our site and improve performance.

‍

3. How we use your information

We use your data to:

• Respond to enquiries and manage client relationships.
• Deliver our services (design, development, consulting).
• Send occasional updates, case studies, or news (if you've opted in).
• Improve our website and marketing through analytics.

We'll never sell your data.

‍

4. Our GDPR commitment

We follow the principles set out in the General Data Protection Regulation (GDPR) as a best practice standard, which require that personal data is:

• Processed fairly, lawfully, and transparently.
• Collected for specified purposes and not used in incompatible ways.
• Limited to what is necessary.
• Accurate and kept up to date.
• Retained only as long as necessary.
• Protected with appropriate security.

We also operate with a "privacy by design" approach, meaning we think about privacy and security from the start when creating systems, processes, or services.

Depending on the situation, we may act as:

• A data controller (when we collect information directly, e.g. enquiries).
• A data processor (when handling personal data on behalf of clients).

‍

5. Lawful bases for processing

We rely on the following lawful bases:

• Consent: e.g. for marketing emails, and for analytics and marketing cookies on this website.
• Contract: e.g. to provide services you've asked for.
• Legitimate interest: e.g. to maintain client relationships or improve our services.

‍

6. Sharing your data

We only share your data when necessary:

• With trusted third-party tools (e.g. Google Analytics and the Meta Pixel, only after you accept them; email marketing platforms, CRM tools, web forms).
• With subcontractors or freelancers directly involved in your project.
• If required by law.

We make sure partners handle your data responsibly and securely.

‍

7. Social media accounts you connect

We run a social media publishing tool at social.konzept.ba. It uses the app Konzept Social Media on the Meta platform. We use it to plan, publish and measure posts for our own brand and for clients who ask us to manage their accounts.

When you connect a Facebook Page or an Instagram professional account to the tool, we receive from Meta:

• Your name, profile picture and Facebook user ID.
• The names, IDs and profile pictures of the Pages and Instagram accounts you choose to share.
• Access tokens that let the tool act on those Pages and accounts.
• Posts, media and captions that we create or schedule in the tool.
• Comments on those posts, and insights such as reach and engagement.

We use this data only to publish the posts you or your team schedule, to reply to and moderate comments, and to report results. We do not sell it, we do not use it for advertising profiles, and we do not share it with anyone except as Section 6 describes. Our use follows the Meta Platform Terms.

The tool runs on our own server in Germany. Access tokens are kept until you disconnect the account. Post history and insights are kept for the length of our contract, then deleted.

You can remove this data at any time. Our Data Deletion page tells you how.

‍

8. Data storage & security

• Data is stored on secure cloud services.
• Enquiry emails are kept for up to 3 years.
• Client project data is retained only as long as needed for the contract (or as agreed).
• Access is restricted to our team and trusted collaborators.

‍

9. International transfers

Some of our providers are based outside the EU (for example, US-based SaaS tools). Where that's the case, we rely on recognised safeguards such as Standard Contractual Clauses or adequacy decisions to ensure your data is protected.

‍

10. Your rights

Under GDPR, you have the right to:

• Be informed about how your data is used.
• Access, correct, or delete your data.
• Restrict or object to processing.
• Request data portability.
• Withdraw consent (e.g. unsubscribe from marketing emails).

To exercise these rights, email info@konzept.ba. We'll respond within the statutory timeframe.

‍

11. Data breaches

If a personal data breach occurs, we:

• Escalate and investigate it immediately.
• Notify affected clients within 24 hours of confirmation.
• Support clients with reporting to the relevant supervisory authority (within 72 hours where required).
• Take corrective action to prevent recurrence.

‍

12. Cookies

Our website uses cookies to:

• Make the site function properly.
• Analyse traffic and performance.
• Support marketing campaigns.

Analytics and marketing cookies stay off until you accept them in the cookie banner. You can change or withdraw your choice at any time in Cookie settings at the foot of any page. Our Cookie Policy names every cookie.

‍

13. Updates to this policy

We may update this policy occasionally. When we do, we'll post the new version here and update the date above.

‍

14. Contact us

For privacy-related questions, contact us at:

Konzept
Address: Radnicka bb, Sarajevo, Bosnia and Herzegovina
Email: info@konzept.ba
Phone: 061 442 685